Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
File:                     lAoQolZyjxGku6rcMgS38KNaUAA.mft (raw, json)
Hash identifier:          sONFkV2B1rCMepiDphQ923FbbJbhe2h272ugprpG830=
Subject key identifier:   D5:D7:B5:0B:94:27:0E:C2:EE:A5:9B:AD:5E:CC:0B:D6:8B:B3:73:2F
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Certificate issuer:       /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial:       0194BCE087345BA78DF92895013D8C3A0385
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
Manifest number:          1439
Signing time:             Fri 31 Jan 2025 15:00:18 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:18 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:18 +0000
Files and hashes:         1: 96CoHDqUFKRWLMKpuPNky2AThV0.roa (hash: 2dbkXGtx2Y2iGJ3uWXJRyOKWK4j+bBsW6iNp6F1vwRk=)
                          2: Zv6rhEtfx_jSCXc_S8UyXA0vo2U.roa (hash: upx9rJYDv3PHx1B1uURg+ybXETCTfjV8bsr8SvgJ3XM=)
                          3: biGYeNx8PlSGKHRmVucthKOSlnY.roa (hash: YxlSQax5Hky2oIIKAGXfmWIsjyjpaMRbBxvVdrI+BSI=)
                          4: g1Zk3nIRea2SYaHqoN92Ss1LCL8.roa (hash: aHQejC3hHy18rRg2jbGxWbnzx0KaJtZTncqKQ8jXn3M=)
                          5: lAoQolZyjxGku6rcMgS38KNaUAA.crl (hash: MAUugjW7KYZxzSXTGfPqAl4jQFwhHkEEk7cjD8kSDY4=)
                          6: mmvuqSKrxCIOK5dTOpgllxAuYB8.roa (hash: cXrhSBrwqA5XppxSkBQnZWJRKIyKnPJRdZjf9M/iItg=)
                          7: rZuO-15UbHThyJRmeryxRpgLk2M.roa (hash: /ED0vNPFUaV7PRvXzqX2jHZ983s8HtxjtsJuRuMtCvI=)
                          8: ucC9i3XEX6RhZkWqb6NvZwx0--U.roa (hash: 2+uO/5ecRW47tQiINeeU4pOO33FM+U1i9JrXKMVUjI4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:87:34:5b:a7:8d:f9:28:95:01:3d:8c:3a:03:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
        Validity
            Not Before: Jan 31 15:00:18 2025 GMT
            Not After : Feb  1 15:00:18 2025 GMT
        Subject: CN=d5d7b50b94270ec2eea59bad5ecc0bd68bb3732f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f2:7b:d8:3c:a7:0a:62:e1:d1:f3:2f:f5:7c:
                    31:0a:7a:ab:cb:5c:6f:5b:c7:1f:43:c2:9f:ca:d5:
                    c3:7b:33:d0:37:21:ac:0f:f2:5e:f1:a2:e5:ea:5c:
                    28:a5:49:87:18:62:99:a5:d8:78:a3:78:1e:05:19:
                    07:21:fd:08:2f:f0:b8:36:bf:13:b4:c6:9e:d5:70:
                    01:bb:31:ce:05:6d:79:a0:b3:2b:25:97:d5:85:ef:
                    6c:0f:3d:9d:47:f0:94:bc:2a:aa:f8:ae:72:e6:5c:
                    e1:98:3f:91:0a:9f:eb:bd:15:00:82:05:0f:3a:ae:
                    1a:c6:88:ab:ce:90:c4:a7:5c:06:a2:16:ba:0a:65:
                    5c:79:1a:93:1f:a8:c4:b0:9f:12:42:fa:ab:0b:6f:
                    f8:f5:2e:c7:44:bd:6f:01:c8:d3:08:d3:fc:6d:2d:
                    1c:8b:9b:45:0f:ce:92:fb:97:5a:c9:06:b3:4c:c0:
                    3b:48:3e:15:8c:b4:7d:41:da:ce:9e:d3:c7:f0:c0:
                    82:36:9d:b6:98:41:9c:c0:9d:03:ba:60:70:1a:bb:
                    8e:27:28:e8:cf:3e:4e:b6:72:1e:98:43:d2:f0:3c:
                    64:7c:f9:06:c3:84:93:f0:62:6e:70:9a:76:72:9f:
                    94:73:e3:2f:fb:f2:10:92:d3:94:d2:3d:c1:d7:4e:
                    81:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D7:B5:0B:94:27:0E:C2:EE:A5:9B:AD:5E:CC:0B:D6:8B:B3:73:2F
            X509v3 Authority Key Identifier:
                keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:e5:bc:60:da:bd:af:68:96:a7:20:cd:21:4a:d6:ee:4c:be:
         ac:a9:aa:36:7f:dd:3c:de:f0:ba:f6:78:84:5d:1d:8b:3b:b1:
         2d:7b:f4:69:2f:fa:8a:51:5d:7e:da:39:4c:3b:c8:6c:eb:30:
         0f:f6:28:4f:5e:ae:3b:3b:f7:1c:6e:2d:16:57:be:44:64:06:
         c1:d9:11:cc:db:22:a0:04:04:84:cc:6c:32:f0:a9:cd:04:f6:
         ce:82:b6:db:3b:d6:0a:71:3e:91:39:e6:44:20:31:e8:1f:a8:
         2d:a0:79:86:d8:9b:70:35:11:12:e6:31:60:46:e5:7d:52:c6:
         e9:47:d0:bb:08:94:91:6d:07:dd:4a:81:3f:df:c8:b8:5d:d4:
         13:09:eb:f2:b9:e7:7a:50:ce:7e:d6:50:8f:e0:95:68:51:22:
         1d:aa:2d:f6:05:1d:70:99:ef:0a:e0:57:17:16:0c:f5:e4:e8:
         6c:1f:06:7f:c3:0e:ea:95:c4:b9:e4:c4:e6:e5:16:39:0a:8b:
         aa:e5:d2:9b:3a:cc:18:d3:0c:b9:51:d7:b7:18:21:03:43:84:
         82:92:e9:8b:70:c8:49:9a:c2:ab:07:21:a2:5c:5a:c0:1a:42:
         0d:73:12:f8:9a:f6:c6:5f:89:60:38:cf:11:69:24:50:5d:94:
         06:e0:e1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:53:52 2025 by rpki-client